Least and Greatest Fixpoints 
in Game Semantics 



Pierre Clairambault 
pierre . clairambault@pps . jussieu . f r 

PPS — Universite Paris 7 



Abstract 

We show how solutions to many recursive arena equations can be com- 
puted in a natural way by allowing loops in arenas. We then equip arenas 
with winning functions and total winning strategies. We present two nat- 
ural winning conditions compatible with the loop construction which re- 
spectively provide initial algebras and terminal coalgebras for a large class 
of continuous functors. Finally, we introduce an intuitionistic sequent cal- 
culus, extended with syntactic constructions for least and greatest fixed 
points, and prove it has a sound and (in a certain weak sense) complete 
interpretation in our game model. 



1 Introduction 

The idea to model logic by game-theoretic tools can be traced back to the work 
of Lorenzen [21]. The idea is to interpret a formula by a game between two 
players O and P, O trying to refute the formula and P trying to prove it. The 
formula A is then valid if P has a winning strategy on the interpretation of A. 
Later, Joyal remarked [18] that it is possible to compose strategies in Conway 
games [8] in an associative way, thus giving rise to the first category of games 
and strategies. This, along with parallel developments in Linear Logic and 
Geometry of Interaction, led to the more recent construction of compositional 
game models for a large variety of logics [3, 23, 9] and programming languages 
[17, 4, 22, 5]. 

We aim here to use these tools to model an intuitionistic logic with induction 
and coinduction. Inductive/coinductivc definitions in syntax have been defined 
and studied in a large variety of settings, such as linear logic [6], A-calculus [1] or 
Martin-Lof's type theory [10]. Motivations are multiple, but generally amount 
to increasing the expressive power of a language without paying the price of 
exponential modalities (as in [6]) or impredicativity (as in [1] or [10]). However, 
less work has been carried out when it comes to the semantics of such con- 
structions. Of course we have the famous order-theoretic Knaster-Tarski fixed 
point theorem [25], the nice categorical theory due to Freyd [12], set-theoretic 
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models [10] (for the strictly positive fragment) or PER- models [20], but it seems 
they have been ignored by the current trend for intensional models (i.e. games 
semantics, Gol . . . ). We fix this issue here, showing that (co)induction admits 
a nice game-theoretic model which arises naturally if one enriches McCuskcr's 
[22] work on recursive types with winning functions inspired by parity games 
[24]. 

In Section 2, we first recall the basic definitions of the Hyland-Ong-Nickau 
setting of game semantics. Then we sketch McCuskcr's interpretation of re- 
cursive types, and show how most of these recursive types can be modelled by 
means of loops in the arenas. For this purpose, we define a class of functors 
called open functors, including in particular all the endofunctors built out of 
the basic type constructors. We also present a mechanism of winning functions 
inspired by [16], allowing us to build a category Gam of games and total win- 
ning strategies. In section 3, we present /iLJ, the intuitionistic sequent calculus 
with least and greatest fixpoints that we aim to model. We briefly discuss its 
proof-theoretic properties, then present its semantic counterpart: we show how 
to build initial algebras and terminal coalgebras to most positive open func- 
tors. Finally, we use this semantic account of (co)induction to give a sound and 
(weakly) complete interpretation of fiLJ in Gam. 

2 Arena Games 
2.1 Arenas and Plays 

We recall briefly the now usual definitions of arena games, introduced in [17]. 
More detailed accounts can be found in [22, 14]. We are interested in games with 
two participants: Opponent (O, the environment) and Player (P, the program). 
Possible plays are generated by directed graphs called arenas, which are semantic 
versions of types or formulas. Hence, a play is a sequence of moves of the ambient 
arena, each of them being annotated by a pointer to an earlier move — these 
pointers being required to comply with the structure of the arena. Formally, an 
arena is a structure A = (Ma, Xa, I~a) where: 

• Ma is a set of moves, 

• Xa '■ Ma — > {O, P} x {Q, A} is a labelling function indicating whether a 
move is an Opponent or Player move, and whether it is a question (Q) or 
an answer (A). We write A^ P for the projection of Xa to {O, P} and X^ A 
for its projection on {Q, A}. Xa will denote A,4 where the {O, P} part has 
been reversed. 

• \~a is a relation between Ma + {*} to Ma, called enabling, satisfying: 

— ★ h m ==>• Xa(iti) = OQ; 

— m \~a n A X^ A (n) = A => X Q A A (m) = Q; 

— m h A n A m ± * => X^ p (m) ^ X^ p (n). 
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In other terms, an arena is a directed bipartite graph, with a set of distinguished 
initial moves (m such that * m) and a distinguished set of answers (m 
such that X^ A = A) such that no answer points to another answer. We now 
define plays as justified sequences over A: these are sequences s of moves 
of A, each non-initial move m in s being equipped with a pointer to an earlier 
move n in s, satisfying n m. In other words, a justified sequence s over A is 
such that each reversed pointer chain s^fo) ^~ s ^(i) s^>(n) is a path on 

A, viewed as a directed bipartite graph. 

The role of pointers is to allow reopenings in plays. Indeed, a path on A may 
be (slightly naively) understood as a linear play on A, and a justified sequence 
as an interleaving of paths, with possible duplications of some of them. This 
intuition is made precise in [] •">]. When writing justified sequences, we will often 
omit the justification information if this does not cause any ambiguity. C will 
denote the prefix ordering on justified sequences. If s is a justified sequence on 
A, |s| will denote its length. 

Given a justified sequence s on A, it has two subsequences of particular 
interest: the P-view and O-view. The view for P (rcsp. O) may be understood 
as the subsequence of the play where P (resp. O) only sees his own duplications. 
In a P-vicw, O never points more than once to a given P-movc, thus he must 
always point to the previous move. Concretely, P- views correspond to branches 
of Bohm trees [17]. Practically, the P-view r s n of s is computed by forgetting 
everything under Opponent's pointers, in the following recursive way: 

• r sm? = r s n m if \% P {m) = P; 

• r sm? = m if 7k- h_4 m and m has no justification pointer; 

• r s 1 TOs 2 n~ l = r s [ mn if A® p (n) = O and n points to m. 

The O-view L Sj of s is defined dually. Note that in some cases — in fact if s 
does not satisfies the visibility condition introduced below — r s n and L Sj may 
not be correct justified sequences, since some moves may have pointed to erased 
parts of the play. However, we will restrict to plays where this does not happen. 
The legal sequences over A, denoted by Ca, are the justified sequences s on 
A satisfying the following conditions: 

• Alternation. If tmn C s, then A^ P (™) 7^ A^ p (n); 

• Bracketing. A question q is answered by a if a is an answer and a 
points to q. A question q is open in s if it has not yet been answered. 
We require that each answer points to the pending question, i.e. the last 
open question. 

• Visibility. If tm C s and m is not initial, then if (m) = P the justificr 
of m appears in T 1 , otherwise its justifier appears in L ij. 
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2.2 The cartesian closed category of Innocent strategies 

A strategy a on A is a prefix-closed set of even-length legal plays on A. A 
strategy is deterministic if only Opponent branches, i.e. Vsmn, smn 1 G a, n = 
n' . Of course, if A represents a type (or formula), there are often many more 
strategies on A than programs (or proofs) on this type. To address this issue 
we need innocence. An innocent strategy is a strategy a such that 

sab e a At E a Ata e £ A A r scP = r td? => tab G a 

We now recall how arenas and innocent strategies organize themselves into 
a cartesian closed category. First, we build the product A x B of two arenas 
A and B: 

M AxB = Ma + M b 

^AxB = [Aa,As] 
'rAxB = \~A + \~B 

We mention the empty arena / = (0,0,0), which will be terminal for the 
category of arenas and innocent strategies. We mention as well the arena _L = 
(•,• 1 — y OQ, (*,•)) with only one initial move, which will be a weak initial 
object. We define the arrow A =>■ B as follows: 

M a ^b = M A + Mb 



m ^a^b n 



m =/= -k A m \~a n 
m^*Amhg n 
* m A -k ^a n 

m = -k A * n 



We define composition of strategies by the usual parallel interaction plus 
hiding mechanism. If A, B and C are arenas, we define the set of interactions 
I {A, B, C) as the set of justified sequences u over A, B and C such that u\ A B € 
£a^b, u\ b c G Cb^c an d U\ A c G Ca^c- Then, if a : A B and r : B C ', 
we define parallel interaction: 

<j\\t = {u G I(A, B, C) I u U b G o A u fB O G r} 

Composition is then defined as a; t = {u^ c \ u G ct||t}. It is associative and 
preserves innocence (a proof of these facts can be found in [17] or [14]). We also 
define the identity on A as the copycat strategy (see [22] or [14] for a definition) 
on A A. Thus, there is a category Inn which has arenas as objects and 
innocent strategies on A B as morphisms from A to B. In fact, this category 
is cartesian closed, the cartesian structure given by the arena product above and 
the exponential closure given by the arrow construction. This category is also 
equipped with a weak coproduct A + B [22], which is constructed as follows: 

M a +b = M A + M B + {q, L, R} 
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^A+B — 



X A , A b , q i-> OQ, L h-> PA, R \-> PA] 

m,n £ Ma Amh^n 
m, n £ Mb Amhg n 
m = -k An = q 

(m = q A n = L) V (m = q An = R) 
(m = L A* \~a n) V (m = R A* \~b n) 



2.3 Recursive types and Loops 

Let us recall briefly the interpretation of recursive types in game semantics, due 
to McCusker [22]. Following [22], we first define an ordering < on arenas as 
follows. For two arenas A and B, A < B iff 

M A C M b 
Aa = A s {ma 

= K B n {M A + {*} x M A ) 



This defines a (large) dcpo, with least element I and directed sups given by 
the componentwise union. If F : Inn — > Inn is a functor which is continuous 
with respect to <, we can find an arena D such that D = F(D) in the usual 
way by setting D = |J^L F n (I). McCusker showed [22] that when the functors 
are closed {i.e. their action can be internalized as a morphism (^4 => B) — > 
{FA =>■ FB)), and when they preserve inclusion and projection morphisms 
{i.e. partial copycat strategies) corresponding to <, this construction defines 
minimal invariants [12]. Note that the crucial cases of these constructions are 
the functors built out of the product, sum and function space constructions. 

Wc give now a concrete and new (up to the author's knowledge) description 
of a large class of continuous functors, that we call open functors. These 
include all the functors built out of the basic constructions, and allow a rereading 
of recursive types, leading to the model of (co)induction. 

2.3.1 Open arenas. 

Let T be a countable set of names. An open arena is an arena A with dis- 
tinguished question moves called holes, each of them labelled by an element of 
T. We denote by Ox the holes annotated by X G T. We will sometimes write 
O x to denote a hole of Player polarity, or O® to denote a hole of Opponent 
polarity. If A has holes labelled by Xi, . . . , X n , we denote it by A[Jfi, . . . , X n ]. 
By abuse of notation, the corresponding open functor we are going to build will 
be also denoted by A[X 1 ,. . . , X n ] : (Inn x Inn op ) ri -)■ Inn. 

2.3.2 Image of arenas. 

If A[.Xi, . . . , X n ] is an open arena and B\, ... , B n , B[, . . . , B' n are arenas (possi- 
bly open as well), we build a new arena A{B\, B[, . . . , B n , B' n ) by replacing each 
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occurrence of D x . by Bi and each occurrence of D x . by B[. More formally: 



n 



= (Ma \{n Xl ,...,n x j) + J2 (M Bi + M B , ) 



^A(B 1 ,B' 1 ,...,B n ,B' n ) — [Aa> A s ^, . . . , \b„, ^B' n ] 



m \~a O x , A * h Bi p 
m \~a O x . A * h B j p 
* m A O x , \~a p 



m\-A(B 1 ,B' 1 ,...,B n ,B' n ) P & \ *\-B' i mAn Xz \- A p 



m \- Bi P 
m\- B i ■ p 
4 m\- A p 



Note that in this definition, we assimilate all the moves sharing the same hole 
label and with the same polarity. This helps to clarify notations, and is 
justified by the fact that we never need to distinguish moves with the same hole 
label, apart from when they have different polarity. 

2.3.3 Image of strategies. 

If A is an arena, we will, by abuse of notation, denote by I a both the set of initial 
moves of A and the subarena of A with only these moves. Let . . . , X n ] be 

an open arena, B[, B\, . . . , B' n , B n and C[, C\, . . . , C' n , C n be arenas. Consider 
the application £ defined on moves as follows: 



and then extended recursively to an application £* on legal plays as follows: 



£* erases moves in the inner parts of B[ , Bi , C[ , Ci and agglomerates all the 
initial moves back to the holes. This way we will be able to compare the resulting 
play with the identity on . . . , X n }. Now, if (Ji : Bi — > Ci and Tj : C[ — > B[ 

are strategies, we can now define the action of open functors on them by stating: 



Proposition 1. For any A[X\, . . . , X n ], this defines a functor A[X\, . . . , X n ] : 
(Inn x Inn op ) n — > Inn, which is monotone and continuous with respect to <. 





otherwise 
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Proof sketch. Preservation of identities and composition are rather direct. A 
little care is needed to show that the resulting strategy is innocent: this relies 
on two facts: First, for each Player move the three definition cases are mutually 
exclusive. Second, a P-view of s € A{a\,T\, . . . , cr n , r„) is (essentially) an initial 
copycat appended with a P-view of one of <7j or n, hence the P-view of s 
determines uniquely the P-view presented to one of cr,*, r, or id,A[x 1 ....,x n ] ■ O 

Example. Consider the open arena A[X] = Ox => Ox- For any arena B, 
we have A(B) = B =>■ B and for any a : B\ — > C\ and t : C2 — > B2, we have 
A(a,r) = t =>■ a : (B2 Bi) — > (C2 => C±), the strategy which precomposcs 
its argument by r and postcomposcs it by a. 

2.3.4 Loops for recursive types. 

Since these open functors are monotone and continuous with respect to <, solu- 
tions to their corresponding recursive equations can be obtained by computing 
the infinite expansion of arenas (i.e. infinite iteration of the open functors). 
However, for a large subclass of the open functors, this solution can be ex- 
pressed in a simple way by replacing holes with a loop up to the initial moves. 
Suppose . . . , X n ] is an open functor, and i is such that Ox t appears only 

in non- initial, positive positions in A. Then we define an arena jiXi.A as follows: 



A simple argument ensures that the obtained arena is isomorphic to the one 
obtained by iteration of the functor. For this issue we take inspiration from 
Laurent [19] and prove a theorem stating that two arenas are isomorphic in the 
categorical sense if and only if their set of paths are isomorphic. A path in A 
is a sequence of moves a\, . . . , a n such that for all i £ {1, . . . , n — 1} we have 
a,; ai+i. A path isomorphism between A and B is a bijection <f> between 
the set of paths of A and the set of paths on B such that for any non-empty 
path p on A, <f>(ip(p)) — ip((f>(p)) (where ip(p) denotes the immediate prefix of 
p). We have then the theorem: 

Theorem 1. Let A and B be two arenas. They are categorically isomorphic if 
and only if there is a path isomorphism between their respective sets of paths. 

Now, it is clear by construction that, if A[X] is an open functor such that Ox 
appears only in non- initial positive positions in A, the set of paths of |_|JTLo ^"(-0 
and of \xX.A are isomorphic. Therefore fiX.A is solution of the recursive equa- 
tion X = A(X), and when A[X] is closed and preserves inclusions and projec- 
tions, fiX.A defines as well a minimal invariant for A[A]. But in fact, we have 
the following fact: 




{M A \0 Xi ) 
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Proposition 2. If A[X] is an open functor, then it is closed and preserves 
inclusions and projections. Hence fiX.A is a minimal invariant for A[X]. 

This interpretation of recursive types as loops preserves finiteness of the 
arena, and as we shall see, allows to easily express the winning conditions nec- 
essary to model induction and coinduction. 



2.4 Winning and Totality 

A total strategy on A is a strategy a : A such that for all s £ cr, if there is a 
such that sa £ La, then there is b such that sab £ a. In other words, a has a 
response to any legal Opponent move. This is crucial to interpret logic because 
the interpretation of proofs in game semantics always gives total strategies: this 
is a counterpart in semantics to the cut elimination property in syntax. To model 
induction and coinduction in logic, we must therefore restrict to total strategies. 
However, it is well-known that the class of total strategies is not closed under 
composition, because an infinite chattering can occur in the hidden part of the 
interaction. This is analogous to the fact that in A-calculus, the class of strongly 
normalizing terms is not closed under application: 5 = Xx.xx is a normal form, 
however 55 is certainly not normalizable. This problem is discussed in [2, 16] 
and more recently in [7]. We take here the solution of [16], and equip arenas with 
winning functions: for every infinite play we choose a loser, hence restricting to 
winning strategies has the effect of blocking infinite chattering. 

The definition of legal plays extends smoothly to infinite plays. Let C\ 
denote the set of infinite legal plays over A. If s £ we say that ~s £ a 
when for all s c s, s £ a. We write La = La + L^ A . A game will be a pair 
A = (A, Qa) where A is an arena, and Ga is a function from infinite threads 
on A (i.e. infinite legal plays with exactly one initial move) to {W,i}. The 
winning function Qa extends naturally to potentially finite threads by setting, 
for each finite s: 

W if \s\ is even ; 
L otherwise. 



Qa{s) = 



Finally, Qa extends to legal plays by saying that Ga(s) = W iff Qa{^) = W for 
every thread t of s. By abuse of notation, we keep the same notation for this 
extended function. The constructions on arenas presented in section 2.2 extend 
to constructions on games as follows: 

• Qaxb(s) ~ [Qa, Qb] (indeed, a thread on A x B is either a thread on A or 
a thread on B) ; 

• Qa+b(s) = W iff all threads of s\ A are winning for Qa and all threads of 
S|- B are winning for Qb- 

• Ga=>b(s) = W iff if all threads of s\ A are winning for Qa, then Q B (s\ B ) = 
W. 

It is straightforward to check that these constructions commute with the 
extension of winning functions from infinite threads to potentially infinite legal 



plays. We now define winning strategies a : A as innocent strategies a : A 
such that for all s G a, Ga(s) = W. Now, the following proposition is satisfied: 

Proposition 3. Let a : A => B and r : B => C be too toiaZ winning strategies. 
Then a; r is £o£a^ winning. 

Proof sketch. If cr; r is not total, there must be infinite s in their parallel inter- 
action o~\\t, such that s\ A c is finite. By switching, we have in fact \s\ A \ even and 
\s\ c | odd. Thus Ga{s\ a ) = W and <?c(src) = L- We reason then by disjunction 
of cases. Either Gb{s\ b ) — W in which case Gb^>c( s \ b a) = L an d T cannot 
be winning, or Gb{s\ b ) = L in which case ^a=>b(s|-^ b ) — L and it cannot be 
winning. Therefore er; r is total. 

cr; r must be winning as well. Suppose there is s £ a; r such that Ga^c( s ) = 
L. By definition of Ga^C, this means that Ga(s\ a ) = W and Gc{s\ c ) = L. By 
definition of composition, there is u € cr| [t such that s = u\ A c . But whatever 
the value of Gb(u\ b ) is, one of a or t is losing. Therefore <t;t is winning. □ 

It is clear from the definitions that all plays in the identity are winning. It 
is also clear that all the structural morphisms of the cartesian closed structure 
of Inn are winning (they are essentially copycat strategies), thus this defines a 
cartesian closed category Gam of games and innocent total winning strategies. 

3 Fixpoints 

3.1 fiLJ: an intuitionistic sequent calculus with fixpoints 

3.1.1 Formulas. 

S ::= S =>T \ SWT \ S AT \ /jtX.T \ vX.T \ X \ T | ± 

A formula F is valid if for any subformula of F of the form [iX.F', 

(1) X appears only positively in F' , 

(2) X does not appear at the root of F' {i.e. X appears at least under a V 
or a in the abstract syntax tree of F'). 

(2) corresponds to the restriction to arenas where loops allow to express recur- 
sive types, whereas (1) is the usual positivity condition. We could of course 
hack the definition to get rid of these restrictions, but we choose not to obfus- 
cate the treatment for an extra generality which is neither often considered in 
the literature, nor useful in practical examples of (co)induction. 

3.1.2 Derivation rules. 

We present the rules with the usual dichotomy. 

Identity group 



ThA A,AhB 
■ ax Cut 



Ah A T,AhB 
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- Structural group 

T,A,A\-B rhB r,i,6,AhC 

C W 7 

T,Ah-B T,AhB T,B,A,AhC 



Logical group 



r,ihB ThA A,BhC 



r.ihi rhT 



A r N A; 

ThAAB r,iABhC T, A A B h C 



rhi ^ ThB _^ r,ihC A,BhC 

vv v; v ; 



ThAvB rhiVB T, A, AV B h C 



Fixpoints 

T h T[fiX.T/X] T[A/X] h A T[uX.T/X] h B Ah T[A/X] 

Mr Mi Vi V r 

Th-fiX.T fiX.ThA vX.TVB Ah vX.T 



Note that the fii, vi and v r rules are not relative to any context. In fact, 
the general rules with a context V at the left of the sequent are derivable from 
these ones (even if, for fii and v r , the construction of the derivation requires 
an induction on T), and we stick with the present ones to clarify the game 
model. Cut elimination on the =>, A, V fragment is the same as usual. For the 
reduction of \i and i>, we need an additional rule to handle the unfolding of 
formulas. For this purpose, we add a new rule [T] for each type T with free 
variables. This method can already be found in [1] for strictly positive functors: 
no type variable appears on the left of an implication. From now on, T[A/X] 
will be abbreviated T(A). This notation implies that, unless otherwise stated, 
X will be the variable name for which T is viewed as a functor. In the following 
rules, X appears only positively in T and only negatively in N: 

Functors 



A h B Ah- B 



T(A) h T(B) N{B) h N{A) 



The dynamic behaviour of this rule is to locally perform the unfolding. We give 
some of the reduction rules. These are of two kinds: the rules for the elimination 
of [T], and the cut elimination rules. Here are the main cases: 
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A h B ~» ax Ah B 



[T](XgFV(T)) T^ T [X] Ah B 



T h T Ah B 



Ah B Ah B 

W 777" 777 



Ah B ^ N(B) h N(A) T{A) h T(B) 

[N => T 



N(A) => T(A) h N(B) => T(B) 1 N{A) T(A),N(B) h T{B) 



N(A) => T(A) h N(B) => T(B) 



Ah B 

[T\pY.T(B)/Y]] 



Ah B ^T(A)[ f iY.T(B)/Y] h T{B)\pY.T{B)/Y 

\fiY.T] Mr 



HY.T(A) h nY.T(B) T(A)\p.Y.T(B)/Y] h fiY.T(B) 

fj,Y.T(A) h nY.T(B) 

We omit the rule for v 1 which is dual, and for A and V, which are simple 
pairing and case manipulations. Note also that most of these cases have a 
counterpart where T is replaced by negative N, which has the sole effect of ir 
being a proof of B h A instead of A h B in the expansion rules. With that, we 
can express the cut elimination rule for fixpoints: 

7Tl 7T 2 



T h T\iiX.TjX\ T[A/X] h A 

T I- fiX.T fj,X.T h A 
Cut 

r h a 

7T 2 



T[A/X] h A 



TTi fiX.T h A 

[T] 



T h T[fxX.T/X] T[fiX.T/X] h T[A/X] tt 2 

■ Cut 



r h T[A/X] T[A/X] h A 
Cut 

r h a 

Wc skip once again the rule for v, which is dual to fi. We choose consciously 
not to recall the usual cut elimination rules nor the associated commutation 
rules, since they are not central to our goals. fiLJ, as presented above, does 
not formally eliminate cuts since there is no rule to reduce the following (and 



11 



its dual with i>): 

T{A) h A tt 2 

fJ'i 

nX.T h A T,A\-B 

Cut 

T, fiX.T h £? 

This cannot be reduced without some prior unfolding of the ijlX.T on the left. 
This issue is often solved [6] by replacing the rule for /i presented here above by 
the following: 

T(A) h A T,AhB 
T,fiX.T h B 

With the corresponding reduction rule, and analogously for v. We choose here 
not to do this, first because our game model will prove consistency without 
the need to prove cut elimination, and second because we want to preserve the 
proximity with the categorical structure of initial algebras / terminal coalgcbras. 

3.2 The games model 

We present the game model for fixpoints. We wish to model a proof system, 
therefore we need our strategies to be total. The base arenas of the interpreta- 
tion of fixpoints will be the arenas with loops presented in section 2.3.4, to which 
we will adjoin a winning function. While the base arenas will be the same for 
greatest and least fixpoints, they will be distinguished by the winning function: 
intuitively, Player loses if a play grows infinite in a least fixpoint (inductive) 
game, and Opponent loses if this happens in a greatest fixpoint (coinductive) 
game. The winning functions we are going to present are strongly influenced 
by Santocanale's work on games for /i-lattices [24]. A win open functor is 
a functor T : (Gam x Gam op )™ — > Gam such that there is an open functor 
T [X\ , . . . , X n ] such that for all games Ai , . . . , A2 n of base arenas A\ , . . . , A2 n , 
the base arena of T(Ai, . . . , A2 n ) is T(Ai, . . . ,A n ). In other terms, it is the 
natural lifting of open functors to the category of games. By abuse of notation, 
we denote this by T[Xi, . . . , X n ], and T[X\, . . . , X n ) will denote its underlying 
open functor. 

3.2.1 Least fixed point. 

Let T[Xi, . . . , X n ] be a win open functor such that Dj^i appears only positively 
and at depth higher than in T[Xi, . . . , X n \. Then we define a new win open 
functor fj,X\.T\X2i ■ ■ ■ , X n ] as follows: 

• Its base arena is /j,X\.T[X2, . . . , X n ] ; 

• If A 3 , ...,A 2 „ € Gam, ^Xi.t(a 3 ,...,a 2 „)(s) = W iff 

— There is N G N such that no path of s takes the external loop more 
that TV times, and ; 
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— s is winning in the subgame inside the loop, or more formally: 

5T(I,I,A 3 ,...,A 2 „)(>tT(I,I,A3,...,A 2 „)) = W - 

3.2.2 Greatest fixed point. 

Dually, if the same conditions are satisfied, we define the win open functor 
vXi.T[Xi, . . . , X n ] as follows: 

• Its base arena is nX\.T[X2, ■ ■ ■ , X n ] ; 

• If A 3 , . . . , A 2n £ Gam, ^x 1 .t(a 3 ,...,a 2 „)(s) = W iff 

— For any N £ N, there is a path of s crossing the external loop more 
than N times, or ; 

— s is winning in the subgame inside the loop, or more formally: 

ST(I,I,A3,...,A 2 „)(stT(I,I,A 3 A 2 „)) = W - 

It is straightforward to check that these are still functors, and in particular 
win open functors. There is one particular case that is worth noticing: if T[X] 
has only one hole which appears only in positive position and at depth greater 
than 0, then /iX.T is a constant functor, i.e. a game. Moreover, theorem 1 
implies that it is isomorphic in Inn to T(fiX.T). It is straightforward to check 
that this isomorphism ij : T(fxX.T) — > fxX.T is winning (it is nothing but the 
identity strategy), which shows that they are in fact isomorphic in Gam. Then, 
one can prove the following theorem: 

Theorem 2. IfT[X] has only one hole which appears only in positive position 
and at depth greater than 0, then the pair (fiX.T, ij) defines an initial algebra 
forT[X] and (uX.T, i^ 1 ) defines a terminal coalgebra for T[X]. 

Proof. We give the proof for initial alebras, the second part being dual. Let 
(A, a) another algebra of T[X]. We need to show that there is a unique a> : 
liX.Y => B such that 

T(/iXTrf < — I T(B) 
fiX.T > B 

a' 

commutes. The idea is to iterate a: 

T 3 (ct) „ T 2 (ct) „ T(cr) „ 

ij. T 3 (B) — — >■ T 2 (B) — — ^ T(B) -^—^ B 

and somehow to take the limit. In fact we can give a direct definition of a^: 

a 

{s€W | 3n £ N*, s£a^} 



a f = 
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This defines an innocent strategy, since when restricted to plays of /J.X.T, these 
strategies agree on their common domain. This strategy is winning. Indeed, 
take an infinite play s E . Suppose Sf MX T is winning. By definition of Q^x.Ti 
this means that there is N € N such that no path of Sf MX T takes the external loop 
more than N times. Thus, s € £t"(i)=*-b- But this implies that s £ a^ n \ and 
a {n) is a composition of winning strategies thus winning, therefore s is winning. 
Moreover, is the unique innocent strategy making the diagram commute: 
suppose there is another / making this square commute. Since T(/xX.T) and 
[iX.T have the same set of paths, if is in fact the identity, thus we have T(/); a = 
/. By applying T and post-composing by a, we get: 

T 2 (/);T(a); CT = T(/); ( 7 = / 

And by iterating this process, we get for all nefj: 

T"+ 1 (/);T"( CT );...;T(a); ( T = / 



Thus: 



T n+1 (/);cr (n) = / 



Now take s S /, and let n be the length of the longest path in s. Since T[X] 
has no hole at the root, no path of length n can reach B in T n+1 (B), thus 
s 6 a( n ' , therefore s £ . The same reasoning also works for the other inclusion. 
Likewise, if a : B — > T(B), we build a unique cr* : B — > vX.T making the 
coalgebra diagram commute. □ 

3.3 Interpretation of /iLJ 
3.3.1 Interpretation of Formulas. 

As expected, we give the interpretation of valid formulas. 

IT] = 1 \A => B\ = [A] {Bj 

m = -l m = n x 

{AvBj = lAj + m IfiX.Tj - y.X.lT\ 

[A AS] = [A] x [B] IvX.Tl = vX\n 



3.3.2 Interpretation of Proofs. 

As usual, the interpretation of a proof 7r of a sequent A\,..., A n h B will be a 
morphism [7r] : \A{\ x . . . x \A n \ — > [SJ. The interpretation is computed by 
induction on the proof tree. The interpretation of the rules of LJ is standard 
and its correctness follows from the cartesian closed structure of Gam. Here 
are the interpretations for the fixpoint and functor rules: 



T h T[fiX.T/X] 

1 r h /iX.t 



■ II r 



= W;*[t] 



T[A/X] \- A 
1 fiX.T h A 



■Ml 
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TT 



T[vX.T/X] h B 



= i 




-l 



A h T[A/X] 



t 



II A h vX.T 



TT 



Ah B 



PTKM) 



[T] 

IT(A) h 



We do not give the details of the proof that this defines an invariant of 
reduction. The main technical point is the validity of the interpretation of the 
functor rule; more precisely when the functor is a (least or greatest) fixpoint. 
Given that, we get the following theorem. 

Theorem 3. If tt tt' , then [ttJ = [tt'J. 

In particular, this proves the following theorem which is certainly worth 
noticing, because y,LJ has large expressive power. In particular, it contains 
Godel's system T [13]. 

Theorem 4. fiLJ is consistent: there is no proof of _L. 

Proof. There is no total strategy on the game _L. □ 
3.3.3 Completeness. 

When it comes to completeness, we run into the issue that the total winning 
innocent strategies are not necessarily finite, hence the usual definability process 
does not terminate. Nonetheless, we get a definability theorem in an infinitary 
version of [iLJ . Whether a more precise completeness theorem is possible is 
a subtle point. First, we would need to restrict to an adequate subclass of 
the recursive total winning strategies (for example, the Ackermann function is 
definable in (xLJ). Then again, the problem to find a proof whose interpretation 
is exactly the original strategy would be highly non-trivial: if a : fiX.T => A, we 
have to guess an invariant B, a proof tt\ of T{B) h B and a proof 1T2 of B h A 
such that [7Ti]' ; [712] = a. Perhaps it would be more feasible to look for a proof 
whose interpretation is observationally equivalent to the original strategy, which 
would be very similar to the universality result in [17]. 

4 Conclusion and Future Work 

We have successfully constructed a games model of a propositional intuition- 
istic sequent calculus [iLJ with inductive and coinductive types. It is striking 
that the adequate winning conditions on legal plays to model (co)induction 
are almost identical to those used in parity games to model least and greatest 
fixpoints, to the extent that the restriction of our winning condition to paths 
coincides exactly with the winning condition used in [24] . It would be worthwile 
to investigate this connection further: given a game viewed as a bipartite graph 
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along with winning conditions for infinite plays, under which assumptions can 
these winning conditions be canonically lifted to the set of legal plays on this 
graph, viewed as an arena? Results in this direction might prove useful, since 
they would allow to import many game-theoretic results into game semantics, 
and thus programming languages. 

This work is part of a larger project to provide game-theoretic models to 
total programming languages with dependent types, such as COQ or Agda. 
In these settings, (co)induction is crucial, since they deliberately lack general 
recursion. We believe that in the appropriate games setting, we can push the 
present results further and model Dybjer's Inductive-Recursive[ll] definitions. 
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